Pages

Tuesday, 21 January 2014

Rejestracja istniejącego, lub jednoliterowego nicku [MyBB, phpBB]


Za namową Adama z Z3S postanowiłem opisać problem po polsku i przeprowadzić trochę więcej testów (dzięki za motywacje! :>).

Czym jest "zero width non jointer"
"zero width non jointer" jest znakiem o szerokości 0 pixeli, samodzielnie występuje jako niewidoczny znak. Więcej informacji: http://en.wikipedia.org/wiki/Zero-width_non-joiner

Znajdziemy go w tablicy znaków (Start > Wyszukaj "> "Tablica Znaków"),  zaznaczamy Widok zaawansowany i w wyszukiwanie wpisujemy "Zero Width Non-Joiner", naciskamy wybierz, a następnie kopiuj.




















Test popularnych for
Postanowiłem przetestować jak zadziała użycie go przy rejestracji na kilku popularnych forach.

  • Vbulletin&IpBoard 

Oba wydają się być bezpieczne,
‍‍‍Vbulletin przechodzi początkową walidacje, przy wpisywaniu, jednak po kliknięciu zarejestruj:








Podejście IpBoard bardziej mi się spododało, odrazu informuje, że można użyć tylko znaków a-zA-Z0-9





  • MyBB:

Potrzebujemy nicku 3 znakowego:






Teraz dodałem 2 znaki "zero width non jointer":






 Działa!









Ale rejestracja nicku jak 'a', może służyć jedynie zabawie, teraz spróbujmy zarejestrować istniejący nick, czemu by nie "admin" ?

Przed dodaniem znaku U+200c :




 

Po:












Zalogowano



Dodanie posta w temacie prawdziwego admina:
















Na następnym screenie, możemy zobaczyć 3 adminów i 2 użytkowników o nicku 'a':








Zgłosiłem już to do MyBB.

  • phpBB

Tym razem forum nie pozwala nam zarejestrować takiego samego, jednak nadal można nick jednoliterowy:







Zagrożenia:
Powiecie, że np. w MyBB "admin jest zielony i ma więcej gwiazdek", Prawda..., ale:
1. W prywatnej wiadomości, np z prośbą o nowe hasło, ludzie mogą tego nie zauważyć, szczególnie jeżeli użyjemy takiego samego avataru.
2. Możliwe jest stworzenie każdego nicku, więc atakujący może stworzyć konto o nicku zaufanego sprzedawcy, o takiej samej randze, a nabicie postów to nie problem.
3. Ludzie mogą popełnić błędy podczas wysyłania prywatnych wiadomości i wybrać nas, zamiast prawdziwego adresata.


Jak zaradzić:
Najlepszym sposobem, jest sposób zastowany przez IpBoard, czyli whitelist dla dozwolonych znaków, np. a-zA-Z0-9

Fix w MyBB stworzony przez Pawła Klebba:

Plik inc/datahandlers/user.php, linijka koło 73. Zamienić ją na:
$username = str_replace(array(unichr(160), unichr(173), unichr(0xCA), dec_to_utf8(8238), dec_to_utf8(8237), dec_to_utf8(8203), dec_to_utf8(8204) ), array(" ", "-", "", "", "", "", ""), $username);


50 comments:

  1. Habits die hard. So, if we are going to be slaves of our habits, lets at least have good habits. If we stretch this point, it is easy to see the case for money and financial education for school children.http://www.careerpanth.xyz/

    ReplyDelete
    Replies



    1. COPE TECHS is an organization of Technology experts🖥️💻 with the aim to help individuals with solving Technology difficulties. We offer the best hacking services as well as our aim is not for Theft purpose but to help individuals overcoming Technology issues with our skills.

      ✴️For example-: There are so many individuals out there who owe a lot of debts💶💷 to Banks and other Loan Firms and are working hard 🛠️⚒️to pay back but really can't pay. That's were our help can come in. We have designed a platform that have been helping so many in extracting crypto currency💰 such as Bit Coin, Lite Coin e.t.c

      ✴️Another Example of our service-: A Man or Woman who suspects his/her Spouse of Cheating but have no prove, we could help by HACKING the Spouse Cell phone📱 so he/she could get access to Chats, Emails📩, Location📍, Phone calls 📞and text message✉️ of the Spouse anywhere they are.

      Other services we offer are-:
      ✴️Recovery of Lost Bitcoin in binary auctions💰
      ✴️ Changing of Grades from Universities.📃
      ✴️ Detection of weakness in Computer system security⚛️
      ✴️Funding a PayPal account💷💵
      ✴️Cyber Attacks☣️ and lots more

      Put this on your mind, "AS LONG AS IT'S TECHNOLOGY, IT CAN BE HACKED"

      We belong to the HACKERS forum HackerOne and we have the Top hackers in the forum always ready to take the risk and do a job.

      If you need hacking Services, contact-:
      COPETECHS@GMAIL.COM

      We look forward to hacking for you.

      Delete
  2. The blog resembles a chocolate for me. I need to have it constantly.
    clash royale triche

    ReplyDelete
  3. How about you take a good look here for some good information about spyware application called mSpy

    ReplyDelete
  4. Im no expert, but I believe you just made an excellent point. You certainly fully understand what youre speaking about, and I can truly get behind that. Racing Simulator

    ReplyDelete
  5. The experts of this company always understand the students and their homework issues. So, they provide best primary homework help service in doing their assignment in numerous subjects. The service not only helps the students in resolving their issues of academic assignment, but also provides some time for meditation and relaxation. This company has become a renowned website in worldwide academic industry. It acts as the best homework help service provider, which provide solutions to the changing needs of the students around the world like USA, UK, Australia and Singapore many others. The experts of this company do not hide anything from you and always keep constant contact with you regarding your assignments. If experts face any issues during providing do my homework for me , it is immediately shared with you so that you can resolve the issues regarding your requirements.

    ReplyDelete
  6. My Assignment Services is your first and last destination for every query you have related to ‘help my assignment’ because we guarantee you the lowest possible price of Java Assignment Help Australia with the unmatched quality of assignments in Australia.

    ReplyDelete
  7. This post is not just informative but impressive also. The post is so convincing that it created an urge to choose Assignment Help services. You can email us at Info@Myassignmenthelpau.Com or Phone Number: +61-2-8005-8227

    ReplyDelete
  8. StudentsAssignmentHelp.com is working to give the professional Essay Help services for all the students studying in different colleges or universities in Ireland. We can cover any of the essay topic for you and assure that you will score the highest grades ever.

    ReplyDelete
  9. Allassignmenthelp has been the academic industry leader for last four years now. Online assignment helpin the field of a specialized product that benefit students.

    ReplyDelete
  10. Allassignmenthelp reviews31 January 2019 at 22:39

    Welcome to the Best writer Review, Here you can get the best Allassignmenthelp reviews
    sites. We strongly urge you to check our entire website once and we will assure you will find this review website very useful. Our hard work will be rewarded if students like you will appreciate our effort and spread the message about this site with your class-fellows and friends.

    ReplyDelete
  11. A lot of valuable information can be derived from the post. Certainly, this compelling post will encourage readers to choose Assignment Help Australia services. You can email us at info@firstassignmenthelp.com.

    ReplyDelete
  12. Thanks have been given the opportunity to comment. Hopefully what you provided is useful for all those who need them. Visit my website if you want to know more about www.12naga.com

    judi online terpercaya
    taruhanbola
    Poker Online
    togel online
    casino online
    sabung ayam online
    tangkas online terpercaya
    slot online

    ReplyDelete
  13. Students Assignment Help have the dedicated and expert team of professional writers who can provide the how to write an essay services correctly. Our writing experts have complete knowledge of all academic assignments to assist students. Our expert writers are the degree holder from the top universities.

    ReplyDelete
  14. Very nice blog and articles. I am really very happy to visit your blog. Now I am found which I actually want. I check your blog everyday and try to learn something from your blog. Thank you and waiting for your new post. My Assignment help

    ReplyDelete
  15. AllAssignmenthelp reviews is best reviews site. We at Top Quality Assignment believe that there is no shortcut to success and to attain success, hard work, dedication, and commitment must be present.
    AllAssignmenthelp reviews
    All Assignment help reviews


    ReplyDelete
  16. Being an academic writer from past 5 years providing assignment help to college and university students also associated with Myassignmenthelp platform. I am dedicated in providing best online academic writing services to the college students at the affordable rates.

    ReplyDelete
  17. To get the best coursework writing help UK service hire our assignment help experts at StudentsAssignmentHelp.com at a reasonable price. Our assignment help experts are available to assist the students.

    ReplyDelete
  18. R u looking for Do my assignment services in dublin? So don't worry about your assignment. Our experts helper they will writes your assignment at a cheap cost.

    ReplyDelete
  19. Students are demanding to finish your homework quickly they you can easily get our best service of homework help given by the students assignment help experts. Our experts are ready to offer you help and keeps working for the students to give best service every day. At studentsassignmenthelp.com students can easily get best service 24X7.

    ReplyDelete
  20. My Assignment Services is one such Online Assignment Help provider which provides a helping hand to all your academic related queries. They have a lot of professional experts who are skilful in giving you guidance and providing you with cheap assignment help services. You are free to contact their experts by visiting their website and get your pending presentations completed on the time. Given below are some of the steps that they follow while drafting your assignments. Many students see that Assignment Help UK experts are proficient in writing your assignments but no one wonders the reason behind it. However, students pursuing IT need to understand the concepts of Java because it holds down the concept of object oriented programming. The programming concepts are complex to understand and brings a havoc to students, that is why, My Assignment Services bring you our online assignment help services. Taking out some time to consider and contrast about what options that you have that you can include by writing them on a piece of paper. You can also contact some real time Deakin Referencing Generator experts to assist you with the following topics.

    ReplyDelete
  21. 'Write my essay' we provide service. Students don’t worry about writing. We provide write your essay with the help of our experts. Experts have much knowledge of writing. Hire our experts at Australiaassignmenthelp.com

    ReplyDelete
  22. Pure natural keto is designed for dieters who are just beginning a Ketogenic diet sometimes find that using supplements to achieve ketosis is easier than doing it through nutrition alone. Exogenous ketones supplements are also great if they temporarily ‘fall off the wagon.’ That is what is making Pure natural keto such a popular product these days. It makes being on a Keto diet much easier, and it can help you stay on course.

    Pure Natural Keto Review - Must Watch This Before Buying

    ReplyDelete
  23. If you are searching the cheapest help with assignment writing services nearby your location then you can check out Students assignment help.com, a best assignment service that provides the 100% plagiarism free services. We provide assignment writer at a very low price.

    ReplyDelete
  24. Engineers who wish to migrate to Australia must submit a Competency Demonstration Report and the Engineers Australia must approve it. Thus, engineering students look forward to getting Cdr Australia which assists them to get a flawless CDR. This reduces the chances of rejection by the EA.
    Most students and experienced civil engineers are today looking forward to migrating to Australia as the job scope is better and bigger with a high pay scale. Therefore, getting CDR help is the only scope to gain entry into the country.
    The Cdr Engineers Australia must be impressive and abide by the ANZSCO code and guidelines. It should also showcase the skills of the applicants as a suitable civil engineer to work according to the Australian rules and regulations.
    The service providers who assist the students with CDR have experienced CDR report writers. These writers know the requirements of a CDR and do it accordingly.

    ReplyDelete
  25. Don't wait for cheap assignment services in New Zealand. Just hire students assignment help.com writers for taking the best NZ assignment help in a very affordable price compare to other companies.

    ReplyDelete
  26. Thank you for this useful content, It’s a very useful content that helps me to complete my assignment at right time. I would like to write about my experience of assignment help Australia. I am an academic expert here who provides reference assignment including Accounting, Management, Finance, IT, Economics, Computer Science, Nursing, Marketing; all Academic subjects to University Students across Australia or even globe. We are a big online assignment help providers who help students to get HD grades according to assessment guidelines and instructions.

    Those who are searching for assignment help in Melbourne, Perth, Brisbane, Adelaide etc. They can get an Online Assignment Expert - the No.1 Assignment provider. Any student who is ready to buy an assignment at affordable price, they can visit our marked website & can enjoy the benefits of our amazing and informative services. You can avail of our convenient online assignment help and samples available on our website for free. You can also download it from our website. If you want to get more marks in your university assessment. We assign the best writer according to the subject for your academic problems and help in assignment writing services. Our Customer Care Executives are available 24*7 hours to assist you in the best possible manner. Phone calls and emails are the best methods used by assignment provider.

    ReplyDelete
  27. Hey, Your blog is very informative. It is nice to read such high-quality content. Attractive information on your blog, thank you for taking the time and share with us. Myassignmenthelp delivers quality content related to quality dissertation writing.

    ReplyDelete
  28. It’s not uncommon for students to fumble while working on their college essay even after knowing the descriptive essay definition. The professional essay writers at Allessaywriter will ensure your essay papers look brilliant and you earn appreciation in your class for the same.

    ReplyDelete
  29. Personal statement writing is kind of an application where you need to write about yourself. This is kind of bio data that you present in your university for higher studies or for any job. Thus, it is an important part and you also need to follow certain rules and regulations while writing the same. Here are some of the basic rules of writing a personal statement.
    My Assignment Help

    ReplyDelete
  30. Thank you for sharing this informative post.MyAssignmenthelp.co.uk is giving assignment help to students.we are already trusted by thousands of students who struggle to write their academic papers and also by those students who simply want marketing dissertation writers to save their time and make life easy.

    ReplyDelete
  31. I love to visit your site repeatedly because; here I find all information is very useful and educational for me. English homework help

    ReplyDelete
  32. Allessaywriter.com can provide you all the answers regarding who can "write my essay". In our service, we have some of the best essay typer who are professional in this field. We ensure a high quality work within the stipulated time. Not only that, but our prices are so reasonable that you do not have to peep into your pocket before hiring us.

    ReplyDelete
  33. poussard v spiers contract is a provision that forms part of a contract. Every term in a contract creates a contractual obligation which when breached by either of the parties leads to litigation for the breach. All the terms of a contract are not expressly stated in the contract.

    ReplyDelete
  34. We have collected intriguing topics argumentative essay topics for argumentative essays under a variety of disciplines and specializations. They are listed below for your convenience.

    ReplyDelete
  35. Awesome article, it was exceptionally helpful! I simply began in this and I'm becoming more acquainted with it better! keep doing awesome! Video Calling App

    ReplyDelete
  36. If you are studying at a B-school in Singapore, MyAssignmenthelp.com can be there for you when you are struggling to piece together an MBA essay. We bring you the best MBA essay writing service in the country, thanks to efficient writers and more than a decade of experience in academic writing.

    ReplyDelete
  37. marketing plan of starbucks Corporation believes that with targeting of high end coffee drinker along with coffee creamer, as consistent with present practices. The Corporation aims at achieving new segment of coffee drinkers. The report aims at developing a marketing plan for Starbucks (Lapersonne, 2013).

    ReplyDelete
  38. Characteristics of oligopoly are an important in which there are few firms that accounts for producing and selling a product. In simple words, it can be best described as a market situation which explains competition between the two.

    ReplyDelete
  39. advantages of multinational companies who have huge business operations and they operate in more than one country. Multinational companies are headquartered in home country and they operate business from host countries.

    ReplyDelete
  40. Awesome article, it was exceptionally helpful! I simply began in this and I'm becoming more acquainted with it better! keep doing awesome! Play Ludo Online

    ReplyDelete
  41. Excellent post and wonderful blog, Very good writing a university college and collecting information on this topic .I really like this type of interesting articles keep it up. Get MBA Assignment help in Australia.

    ReplyDelete
  42. Each student is not able to write assignments, that means they will need professional assistance at some point. In this way, the candidates who want to score higher grades and want to get cheaper assistance, assignment help is best by ABAssignmentHelp UK.

    ReplyDelete
  43. Surely a blog serves as the better purpose of conveying any information and I find your information to be of value. Likewise, I wanted to convey that there are services providing the best assignment help Malaysia, who have been helping students enrolled in universities in Malaysia from the last 10 years. We at My Assignment Services are the ideal solution provider of online assignment help Malaysia which comprises of the academic curriculum filled with complex assignments. We have experts who are from different domains and have a lot of experience into their field. If you are searching for Auditing assignment help, Management, Engineering, Nursing, Law or any other, you can find My Assignment Services as the genie of your Aladdin. We offer our top quality assignment writing and live one to one session with the expert at cheaper rates. Get in touch with the best assignment help and complete your pending assignments from our experts.

    ReplyDelete